FIX: Only serialize group membership domains for administrators (#6771)

This commit is contained in:
David Taylor
2018-12-14 15:47:00 +00:00
committed by GitHub
parent a19f69590a
commit 9f3e2a9e34
2 changed files with 26 additions and 0 deletions

View File

@@ -42,6 +42,14 @@ class BasicGroupSerializer < ApplicationSerializer
staff?
end
def include_automatic_membership_email_domains?
scope.is_admin?
end
def include_automatic_membership_retroactive?
scope.is_admin?
end
def include_has_messages?
staff? || scope.can_see_group_messages?(object)
end